Every person who logs in to piper is a User. Their email is the primary identity, and their name is displayed in audit trails and reports. A user can belong to multiple tenant organizations via UserTenant memberships, and their access to individual sites is controlled by SiteAccess records. Users are never created directly in piper — they arrive via Suite authentication.
Technical section
Data model, API, and internals — visible to developers.